Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6f6f6ffb-016f-498b-9bb6-fcc9aaca9a82.roa
File:                     6f6f6ffb-016f-498b-9bb6-fcc9aaca9a82.roa (raw, json)
Hash identifier:          XMWHU8OPiX0LxCch9goh0/ITyEHyHFrWOBeU2RC9DZY=
Subject key identifier:   11:21:8C:A6:D4:7C:93:D4:0C:A8:8B:B9:A5:9A:D0:A3:FE:B1:B4:AF
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       7E22CFB1D717ED54826CB1EAB43CA298826FB882
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6f6f6ffb-016f-498b-9bb6-fcc9aaca9a82.roa
Signing time:             Wed 22 Jul 2026 02:40:39 +0000
ROA not before:           Wed 22 Jul 2026 02:40:39 +0000
ROA not after:            Tue 20 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:321a::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:22:cf:b1:d7:17:ed:54:82:6c:b1:ea:b4:3c:a2:98:82:6f:b8:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 22 02:40:39 2026 GMT
            Not After : Oct 20 23:59:59 2026 GMT
        Subject: serialNumber=d85821a87a472e1295b29f5813ac65cad6a0bda5436c0db54bd3465efc66d720, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:fa:56:9b:05:d4:b3:d9:fd:e6:8c:4e:f9:3d:
                    f1:bf:e1:2e:b9:0e:46:8d:d7:dc:72:fa:7b:e4:ca:
                    cf:05:54:33:32:38:bb:c1:12:ce:5f:64:e8:3f:78:
                    0b:66:b3:67:9e:05:2b:67:d9:d7:cb:c4:21:02:ed:
                    e6:26:3b:0d:34:06:03:d8:03:ef:11:a1:64:f3:7d:
                    58:74:ce:df:08:57:84:6f:02:a7:d5:ae:b6:37:59:
                    c0:36:78:62:d5:db:fc:31:f5:fc:5b:44:c2:6d:74:
                    07:0a:ea:6f:88:d9:79:4d:68:aa:07:d1:7a:3a:1e:
                    68:d4:4b:2e:b2:54:a7:c1:c1:8e:1e:da:f9:38:8e:
                    c7:1b:e9:e6:1c:86:94:07:67:77:f3:df:95:b3:c9:
                    e8:ed:01:24:e5:3f:f7:9a:b8:fc:a4:f8:26:af:8d:
                    19:6e:37:ed:71:61:51:17:41:4d:23:1e:35:44:b7:
                    e1:b5:c1:22:9d:49:a4:a5:5b:5c:87:78:7b:5c:86:
                    a0:30:34:5b:c8:12:0a:11:99:d3:98:e1:d5:ba:a7:
                    0e:e0:2f:b9:30:42:5d:f3:b1:c2:7b:f4:d1:59:63:
                    5b:31:b6:44:9e:22:2d:03:81:54:e9:dd:ab:b2:cb:
                    2c:b4:98:10:f8:71:4b:85:ea:ab:53:75:65:e1:3f:
                    41:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:21:8C:A6:D4:7C:93:D4:0C:A8:8B:B9:A5:9A:D0:A3:FE:B1:B4:AF
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6f6f6ffb-016f-498b-9bb6-fcc9aaca9a82.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:321a::/47

    Signature Algorithm: sha256WithRSAEncryption
         52:ee:85:dc:1c:ef:ef:74:8f:7b:bd:10:21:88:d2:ea:7e:9d:
         c0:c8:77:a7:84:58:c0:3b:13:08:b8:eb:0c:fb:54:e9:57:d3:
         bf:76:6a:a7:2b:63:c3:da:af:2c:be:cd:c6:5d:bc:36:5e:99:
         3f:15:5e:3b:d8:28:d0:40:f9:da:af:4f:64:34:c9:35:37:8f:
         27:28:d3:dc:fc:ba:fc:51:d9:4c:e4:61:c0:5c:25:8f:9f:ac:
         78:8c:0e:e5:40:a4:91:b9:a4:b5:c9:9c:92:c5:0d:f5:59:e8:
         e2:9f:67:d2:0c:26:ef:86:a7:3c:81:3a:16:e0:19:75:e4:dd:
         8e:27:d1:8a:0f:90:95:3f:fd:54:3a:cb:df:38:5d:40:c8:37:
         46:63:c6:6b:aa:b2:f3:32:6c:ac:f7:68:62:9d:e4:62:54:00:
         87:f5:56:b4:5a:c2:70:85:63:7a:d4:1a:27:39:5f:15:6f:2f:
         cd:1f:9b:cb:29:71:dd:42:24:5f:a4:88:aa:a8:da:62:b3:5c:
         e0:c4:1e:e4:50:97:0c:8e:15:e6:0f:72:2a:d7:64:72:ae:3e:
         e6:50:6f:a2:6d:b8:f1:60:da:cd:69:41:bc:3e:99:82:74:b5:
         ff:4d:3b:61:2d:cc:de:77:8c:bb:0f:4c:4d:72:59:5d:40:28:
         fc:04:a8:a8
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUfiLPsdcX7VSCbLHqtDyimIJvuIIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwNzIyMDI0MDM5WhcNMjYxMDIwMjM1OTU5
WjB6MUkwRwYDVQQFE0BkODU4MjFhODdhNDcyZTEyOTViMjlmNTgxM2FjNjVjYWQ2
YTBiZGE1NDM2YzBkYjU0YmQzNDY1ZWZjNjZkNzIwMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDs+labBdSz2f3mjE75PfG/4S65DkaN19xy+nvkys8FVDMy
OLvBEs5fZOg/eAtms2eeBStn2dfLxCEC7eYmOw00BgPYA+8RoWTzfVh0zt8IV4Rv
AqfVrrY3WcA2eGLV2/wx9fxbRMJtdAcK6m+I2XlNaKoH0Xo6HmjUSy6yVKfBwY4e
2vk4jscb6eYchpQHZ3fz35WzyejtASTlP/eauPyk+CavjRluN+1xYVEXQU0jHjVE
t+G1wSKdSaSlW1yHeHtchqAwNFvIEgoRmdOY4dW6pw7gL7kwQl3zscJ79NFZY1sx
tkSeIi0DgVTp3auyyyy0mBD4cUuF6qtTdWXhP0F/AgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUESGMptR8k9QMqIu5pZrQo/6xtK8wHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzZmNmY2ZmZiLTAxNmYtNDk4Yi05YmI2LWZjYzlhYWNhOWE4Mi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwEmAJAAMhowDQYJKoZIhvcNAQELBQADggEBAFLuhdwc7+90j3u9ECGI0up+
ncDId6eEWMA7Ewi46wz7VOlX0792aqcrY8Paryy+zcZdvDZemT8VXjvYKNBA+dqv
T2Q0yTU3jyco09z8uvxR2UzkYcBcJY+frHiMDuVApJG5pLXJnJLFDfVZ6OKfZ9IM
Ju+GpzyBOhbgGXXk3Y4n0YoPkJU//VQ6y984XUDIN0ZjxmuqsvMybKz3aGKd5GJU
AIf1VrRawnCFY3rUGic5XxVvL80fm8spcd1CJF+kiKqo2mKzXODEHuRQlwyOFeYP
cirXZHKuPuZQb6JtuPFg2s1pQbw+mYJ0tf9NO2EtzN53jLsPTE1yWV1AKPwEqKg=
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:22:58 2026 by rpki-client